Noticed that an error message in ike.c should be referring to "phase 1" instead of "phase 2", since it is in the ike_section_p1() function.
Lawrence Index: ike.c =================================================================== RCS file: /cvs/src/sbin/ipsecctl/ike.c,v retrieving revision 1.69 diff -u -p -r1.69 ike.c --- ike.c 15 Oct 2010 12:11:10 -0000 1.69 +++ ike.c 26 Dec 2010 14:42:03 -0000 @@ -352,7 +352,7 @@ ike_section_p1(struct ipsec_rule *r, FIL exchange_type = "AGGRESSIVE"; break; default: - warnx("illegal phase 2 ike mode %d", r->p1ie); + warnx("illegal phase 1 ike mode %d", r->p1ie); return (-1); }